CyberSec.Space Logo
Back to CVE Browser

CVE-2020-7501

HIGH
8.8
CVSS Severity Score
EPSS Score0.0050%
EPSS Percentile11.16th
PublishedJun 16, 2020
Last ModifiedNov 21, 2024

Vulnerability Description

A CWE-798: Use of Hard-coded Credentials vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 16 and prior) and Vijeo Designer (V6.2 SP9 and prior) which could cause unauthorized read and write when downloading and uploading project or firmware into Vijeo Designer Basic and Vijeo Designer.

Affected Platforms (CPE)

📦
Schneider Electric

Vijeo Designer

<= 1.0
📦
Schneider Electric

Vijeo Designer

<= 6.2
📦
Schneider Electric

Vijeo Designer

= 1.1
📦
Schneider Electric

Vijeo Designer

= 1.1
📦
Schneider Electric

Vijeo Designer

= 6.9
📦
Schneider Electric

Vijeo Designer

= 6.9

References & Advisories

🔗 https://www.se.com/ww/en/download/document/SEVD-2020-133-02/
🔗 https://www.se.com/ww/en/download/document/SEVD-2020-133-02/

Related Vulnerabilities

CVE-2021-227049.1

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Configured by V...

CVE-2020-74907.8

A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 ...

CVE-2021-228177.8

A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation direct...

CVE-2021-227057.8

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or...